Was neu ist
Jede für Nutzer sichtbare Änderung, das Neueste zuerst, datiert auf den Tag, an dem sie live ging. Interne Arbeit ist nicht aufgeführt.
Oktober 2026
MCP Emails in German
The website, sign-up, dashboard, setup guides for every AI client and the pages for German, Austrian and Swiss mailbox providers such as GMX, WEB.DE and T-Online are now in German. Checkout opens in German for German visitors too.
Tool calls start sooner
The account and usage checks that run before every tool call now take one trip to the database instead of up to four, so a typical call starts about 0.4 seconds sooner. Connecting and listing tools got the same treatment.
Smaller tool results
Tool results and tool descriptions are sent more compactly, so they take up less of your assistant's context. The information in them is the same.
Automations keep to their schedule at busy times
Recurring automations are now picked up by several workers at once, so rules run close to their scheduled time even when many are due together.
MCP Emails is run by Albretsen AS
From 1 November 2026 the service is provided by Albretsen AS (org. no. 938 702 373), a Norwegian limited company owned by the same founder at the same address. The terms, privacy policy and email footers name the new company.
IONOS mailboxes outside the US get their own server settings
Adding an address on your own domain hosted by IONOS in Germany or the UK filled in the US server imap.ionos.com, and France, Spain and Italy got no settings at all. The connect form now fills in the server for your region, such as imap.ionos.de, and the IONOS setup page lists each region's server names.
Language menu always opens a real page
On a page that is not available in every language, the language menu in the footer used to lead to a missing page. It now opens that language's home page instead.
Sign up in the language you were reading
Signing up or signing in from a French, Spanish, Norwegian or Chinese page now opens the form and your dashboard in that language, including after signing in with Google or GitHub. You can still change the language in Settings.
Archiving a Gmail conversation opened from Sent
On Gmail connected over IMAP, archiving or moving a conversation you reached from Sent or another folder now takes it out of the Inbox. Before, those messages could stay in the Inbox.
Previews for newsletters that open with styling
HTML emails that start with a long block of styling used to show an empty preview in lists and search results on IMAP inboxes. They now show the first lines of the message.
Reply drafts keep their quote and a single signature
Updating a reply draft keeps the quoted original message when the new text leaves it out, without doubling it when the assistant includes it, and a draft that already ends with your signature is no longer signed twice.
Send As for IMAP inboxes
iCloud, Yahoo and other IMAP inboxes can now send from another address that delivers to the same mailbox, such as an iCloud alias. Add it in the inbox settings and enter the code we email to it, then your assistant can use it as the From address.
Read-only keys are enforced by your mail server too
A read-only key now opens IMAP folders in the mail server's own read-only mode, so the server itself refuses any change to flags, folders or messages. The read-only access page in the docs explains what each key can do.
Security hardening across the workspace
Viewers stay read-only everywhere, leaving a workspace revokes its connected apps, approvers see the Bcc list and full draft they are approving, and the sign-in consent screen shows where it will send you and labels unverified apps.
Faster IMAP searches across several folders
Searching many folders at once on an IMAP inbox is quicker, and a search that runs out of time now returns the folders it finished with a note naming the ones it skipped.
Clearer guidance when a tool call is refused
When an assistant sends an argument a tool does not take, the error now names the tool or field to use instead, so it can correct itself on the next call.
Large attachments up to 10 MB
Files between about 3 MB and the 10 MB limit can now be attached to drafts and sent emails. A file over the limit gets a clear message.
Attachments on drafts
Drafts can now carry files: new ones you give your assistant (including files shared in ChatGPT), or attachments copied from an email already in the inbox. Editing a draft keeps the files it already has, where an edit on Gmail or IMAP used to drop them.
Mail hosts that turn away cloud servers now connect
A few mail providers refuse connections from cloud servers, so connecting or sending from them timed out or was refused even with the right password. MCP Emails now retries those connections through a separate route and remembers which providers need it.
Self-hosted servers find their inboxes
A self-hosted install answered "No inbox matches" on every tool except inbox_list, and could not read stored IMAP credentials. The bundled database schema is back in step with the server, and existing installs upgrade in place with make migrate, keeping their inboxes and keys.
Signature images embedded in the message
A new option in the signature editor embeds your signature's images in each message, so logos show in Thunderbird, Outlook and other clients that block remote images. Works on Gmail and IMAP inboxes; it is off unless you turn it on.
Inline cards in Claude keep working after an update
After we shipped a new version, Claude could show "can't reach MCP Emails" where a card belonged until the connector was refreshed. Cards now load from the current version whatever Claude has cached.
Clearer error for a mistaken mail server
Browser autofill no longer fills the IMAP or SMTP server fields, and entering mcpemails.com as a mail server now says so directly instead of reporting that your provider never answered.
Receive-only and send-only inboxes
A mailbox with only an IMAP server or only an SMTP server can now connect: pick the connection type under Advanced settings in the IMAP/SMTP form. A tool that needs the other half says what still works on that inbox.
ChatGPT and Codex list one tool per operation
OpenAI clients now see a separate tool for each operation, such as creating a draft or renaming a folder, each with its own safety annotations. Every other client keeps the same tool list as before.
Orange mailboxes connect
orange.fr inboxes now sign in for both reading and sending, with nothing extra to set up.
163.com and 126.com mailboxes can read mail
Listing, searching and reading now work on NetEase mailboxes (163.com, 126.com, yeah.net, 188.com) and other Coremail servers.
Room for long sessions in ChatGPT and Notion
Clients that reconnect around every tool call can now run long, busy sessions without being slowed down by connection checks.
Sent copies land in the real Sent folder on IMAP
Mail sent from an IMAP inbox is now filed in the folder the server marks as Sent, including Chinese-named folders such as QQ Mail's 已发送, which also now resolve as sent, drafts, trash and spam. If no Sent folder accepts the copy, the result says so instead of silently leaving Sent empty.
Faster mailbox reads on IMAP accounts
Listing a folder, listing folders with their counts and downloading an attachment each make fewer round trips to the mail server. Results are unchanged.
Tool calls answer about a second sooner
Account checks now run together instead of one at a time, and records are written after the answer is sent. Most noticeable on quick calls such as listing inboxes or folders.
Reading a draft back works
draft_read was refused outside workspaces with the in-chat draft editor. It now returns the full draft on Gmail, Outlook and IMAP.
Folder aliases work on more mailboxes
sent, trash, spam, drafts and archive now resolve on IMAP mailboxes that use names like "Sent Items" or "Junk E-mail" or keep them under INBOX, and archive on Gmail over IMAP searches All Mail. A folder the server briefly refuses to open says to try again, and an automation whose destination folder was deleted switches itself off after five failed runs.
September 2026
Outlook and Microsoft 365 inboxes
Outlook connects with Sign in with Microsoft, over Microsoft Graph, with no app password and no IMAP settings. Personal Outlook.com, Hotmail, Live and MSN accounts connect directly; a work or school account may need an IT admin to approve the app once, and the dashboard gives you a link to send them. Reading, search, sending, drafts, scheduled sends, folders, flags and automations all work, and labels apply as Outlook categories.
ChatGPT gets the access its tools need
ChatGPT does not come back for more access when a tool needs it, so a connection approved as Read-only could never send. The consent screen now opens on Full access for ChatGPT, and you can still narrow it. Creating a folder that already exists now succeeds.
A moved message comes back with its new id
On IMAP a message gets a new id when it moves, and move returned the old one. Move and archive now return new_message_id whenever the server reports it.
Connecting a mailbox never replaces one you already have
Connecting an address that was already connected another way quietly converted the existing inbox. That is now refused and the working inbox is left alone.
Correct ChatGPT setup steps
Plus and Pro accounts can add a custom connector too, through developer mode on the web, not only Business, Enterprise and Edu. The steps also now say the connector has to be switched on from the + menu in each new chat.
More IMAP servers can sign in
Sign-in now uses LOGIN or CRAM-MD5 when the server does not offer PLAIN, so servers such as EarthLink, online.no, 163.com and aliyun.com can connect.
Tools accept any argument whose meaning is clear
Requests are no longer refused over shape alone: a single value where a list is expected, numbers or booleans sent as text, common synonyms such as email_id for message_id, and enum values in any case are all accepted. Anything actually ambiguous is still refused.
Cc and bcc on replies, recipients on draft send
Replies and reply drafts take cc and bcc on every provider. Sending a draft can set its to, cc and bcc without touching the body or attachments.
The automation editor names criteria your inbox cannot run
The dashboard refuses to save an automation whose filter the inbox cannot search on, and says which criterion, instead of letting the rule fail later.
Search says which criteria it could not apply
A criterion the provider cannot search on, such as attachments on IMAP, used to be dropped silently. Search now names it in the result notes, and search-and-move and search-and-delete refuse instead.
Delete and move report a message that is not there
On IMAP, deleting, moving or copying a message id that no longer existed was reported as done. These actions now answer message not found for each missing id.
Readable previews and contact names
List and search previews no longer show raw MIME or base64 for messages with attachments, and contact_search returns decoded display names.
Copy works on Gmail inboxes connected with an app password
Tool descriptions said copy never works on Gmail, so assistants refused it where it does work. Copy availability now follows the connection, and inbox_list reports it per inbox.
Filtering your inbox list no longer says you have none
A filter that matched nothing said no mailbox was connected. It now says the filter matched nothing and lists the inboxes you do have. A new service filter finds inboxes by mail service.
A forward now carries the original exactly
Forwards relay the original byte for byte, with its HTML, inline images and attachments, instead of flattening it to plain text. Originals up to 25 MB, and as_attachment sends the original as a .eml instead.
Automations no longer accept a provider-native raw query
An automation filter can no longer carry raw, a query passed straight to the mail provider. A raw value could match the whole mailbox, and nothing on the unattended path could check it. No stored rule used it, and the interactive search tools still take raw.
Nothing unattended acts on a disconnected inbox
Scheduled sends, held bulk plans and automation runs now require an active inbox, like every other tool call. Work queued before a mailbox was disconnected fails with a reason instead of running.
A draft update says whether it is still threaded
Draft results now carry a threaded flag, true when the draft answers a known message.
Invites are re-checked when they are accepted
Accepting an invite now re-checks that the workspace still exists and has room. Before, that was checked only when the invite was sent.
Restrict the connector to your own email domain
A userinfo endpoint and the openid and email scopes let a ChatGPT Business or Enterprise admin limit the connector to accounts on their own domain. These scopes grant no mail permission.
Tool annotations match what the tools do
Only the four tools that can reach someone outside your mailbox are marked open-world, and anything that sends is marked destructive. Reading a message no longer marks it as read; use the flag action of email_organize for that.
Automations: one connection per run, and a time budget that holds
A run now uses one IMAP connection instead of one per matched message. A run that reaches its time limit stops at a message boundary and picks up the rest next time, instead of being cut off part way.
A folder called Spam is Spam, not Junk
An exact folder name or id now wins over an alias, so a mailbox with a real Spam folder is no longer sent to Junk. Deleting uses the mailbox's real Trash folder.
IMAP search covers the Inbox unless you widen it
On generic IMAP, a search with no folder filter looks in the Inbox, because searching every folder ran past the time limit. Name folders in include_folders to search wider. Gmail and Outlook still search every folder.
ChatGPT can connect
Connecting from ChatGPT failed at the consent screen with "Client metadata could not be verified". Its list of authentication methods is now read correctly.
Looking up a correspondent with a read-only connection
contact_search no longer needs a permission of its own; reading mail covers it. It returns only names and addresses from messages the connection can already read.
Reading and writing are separate tools
Tools that mixed a listing with writes are split, so a client can allow the reading half once and stop prompting. 22 tools in all, and clients connected before the split keep working.
Consent asks for reading first
The consent screen asks for reading alone, and for the rest when something actually needs it, instead of all nine permissions up front.
An approved send goes out as edited, and signed once
Editing a held message before approving it now updates the formatted version too, which is what most mail clients show. Approved sends no longer carry the signature twice.
Setup guides for 77 email providers
Each page carries the IMAP and SMTP settings measured against that provider's own server, with the date they were last checked.
Connecting an inbox
A mailbox at your own domain finds its mail servers automatically. Failures say what actually happened instead of "Connection failed", a slow check shows progress, and choosing a provider no longer pauses for two seconds.
A status page, this changelog, and setup guides per client
/status is built from the monitor that runs against the product every few minutes. Also new: this changelog, setup instructions for 13 MCP clients, and a dated comparison against the other email MCP servers.
Choose the sender name on each inbox
Set the name recipients see per inbox, from the inbox settings or the signature tool.
Attach a file straight from another message
Attach a file to a new email by pointing at the message it came from. The server fetches it, so the file never passes through the conversation.
Forward up to 50 messages in one call
Forwarding takes a list of messages, with results reported per message.
A forward that never left now says so
A forward that fails before anything is transmitted is reported as not sent and is safe to retry. Attachments that could not be carried are no longer quietly left off.
Connect Gmail with an app password
Gmail connects with a Google app password, like iCloud, Yahoo, Zoho and Fastmail. Signing in with Google is still offered.
Send from an inbox's own address on any provider
Naming a mailbox's own address as the sender now works on every provider, not only Gmail.
Long subject lines with accents read correctly
A long non-ASCII subject is reassembled without stray spaces inside words.
Clearer failures, faster IMAP
Provider failures give a specific reason, action names are understood whatever their case or separator, and an abandoned IMAP connection no longer holds up the next call.
August 2026
Every tool declares the shape of its result
All 16 tools publish an output schema, so a client can rely on structured results instead of parsing prose.
Sending through hosts that refuse cloud senders
Mail hosts that reject submissions from cloud providers are now reached over a non-cloud route, encrypted end to end, with a fallback to a direct connection.
Moving mail out of Trash restores it
On Gmail, moving a message out of Trash or Spam now restores it, instead of leaving it on a purge clock.
A folder name means the same thing to every tool
Folders and labels can be addressed by name, id or common alias everywhere. An unrecognised one fails with a message that names the value.
Bcc on Gmail
Bcc recipients are carried on Gmail sends, replies, forwards and drafts.
Provider compatibility reference
The providers page documents how to connect each provider, its settings and what commonly breaks, with a last-verified date.
Inviting a teammate works
Every invite was refused as though the workspace were full. Fixed, and a viewer can no longer connect, disconnect or reconfigure a mailbox in someone else's workspace.
Downloading an attachment that is not text
A PDF or other non-text attachment downloaded fine but reached the assistant as an error. It now arrives with its filename, type and size, and the original message carries a checksum.
Who is behind MCP Emails
A new About page, and the legal entity, organisation number and registered address in the Terms and Privacy pages.
Connecting an IMAP mailbox
The connect form works out the transport from the port, explains failures, and can be completed from the keyboard.
Search dates without a timezone
since and before accept a date and time with no timezone and read it as UTC.
Automations keep running on OAuth connections
A rule created from an OAuth connection stopped running once its access token rotated. Rules now follow the authorisation itself.
Sending from Exchange and Microsoft 365 over SMTP
SMTP authentication now uses the mechanism the server advertises. Before, sending failed and a correct password was reported as wrong.
Labels on every provider
Applying a label works as a Gmail label, an Outlook category or an IMAP keyword. If a name has to be adjusted for the provider, you are told what was applied.
Very long emails come back in readable pieces
A long message body is returned in pieces, each with the total and the point to resume from.
Automations: recurring triage that runs without you
A saved search plus one action, on a schedule, with a record of what it did to every message. No model is in the unattended loop: mail is matched, never interpreted. Deleting is not an available action, a forward always goes to the approval queue, and a reply only ever writes a draft.
Use it from Claude Desktop, Cursor, Cline and Windsurf
npx -y mcpemails bridges the hosted server to clients that can only launch a local command. No dependencies, Node 18 or newer.
Large IMAP messages and attachments
Reading a very large message or pulling several big attachments no longer risks the connection dropping mid-response.
Yandex mailboxes connect
Yandex refused a login shortcut it does not implement, and that was reported as a wrong password. Fixed.
Approve a held send from its own page
A send waiting for approval gets a review page with the full message, approve and reject. Clients that support MCP apps show the same card inline.
Setup guide that remembers where you stopped
The dashboard keeps your setup progress, so a half-finished connection can be resumed.
Approval before an agent sends anything
Turn on approval for an inbox and every send, reply, forward, draft send and scheduled send is held until a person in the workspace decides.
Read an attachment as text, or take the original message
Text, CSV, HTML, JSON and text-layer PDF attachments can be returned as readable text, and the original message downloaded as a .eml. Extraction never runs embedded code and never does OCR.
Safe retries for outbound mail
Send with an idempotency key and a retry within 24 hours cannot produce a second email.
Guided workflows and per-inbox compatibility profiles
Clients that support MCP prompts can offer routines for triage, reply drafting, organising and scheduled-send review. Each inbox also reports which operations are exact, different or unavailable on its provider.
Juli 2026
Drafts on a mailbox that does not call its folder Drafts
Drafts failed on mailboxes that name the folder in another language or nest it. The real folder is now found by asking the mailbox.
An organize-only key can flag and archive
Flagging and archiving asked for permission to send. They now ask for the folder permission, like the other organize actions.
The signature editor saves again
Every save from the signature editor failed with an empty error. Fixed, and the Save button no longer gets pushed off screen.
IMAP search covers every folder
A search with no folder filter now looks across every folder on IMAP, not only the Inbox.
HTML source mode in the signature editor
Paste a signature exported from another mail client, including the table-based layouts most generators produce, and it survives intact.
Self-hosting, under AGPL-3.0
The server is licensed AGPL-3.0 and ships as a container stack you can run against your own database, the same code as the hosted service.
Rich signature editor
Formatting, headings, lists, links, colour and hosted logo images, with a live preview of exactly what gets appended to your mail.
Copy a message into another folder
Messages can be copied into another folder, one at a time or in a batch, on IMAP, Outlook and Fastmail.
Sending a draft requires permission to send
Sending a draft was gated on the drafts permission rather than the send permission. It now requires send:email. Reported by an outside researcher.
Juni 2026
Security and trust page
A page setting out what is accessed and what is stored, alongside a security.txt, the list of subprocessors and a vulnerability disclosure safe harbour.
Connecting a client while signed out
Starting a connection from a client such as Cursor or VS Code while signed out failed with "Missing code_challenge". The request now survives the trip through sign-in.
Per-inbox email signatures
A signature per mailbox, appended by the server to everything it sends, on every provider. A reply mode stops it repeating down a thread.
Setup pages for the app-password providers
Step-by-step connect pages for Gmail, Fastmail, iCloud, Yahoo, Zoho and Yandex.
Scheduled sends encrypted at rest
The contents of a scheduled message are encrypted in the database until it goes out.
Download one attachment at a time
Fetch a single attachment by position or filename, up to 25 MB, as a file rather than text in the conversation.
Reconnecting an inbox opens that inbox's own form
Reconnect sent every mailbox to the Fastmail form with blank fields, where a password manager could fill in a different account. It now opens the right provider's form with everything but the password locked.
Fewer tools, and deleting mail asks first
Related actions were folded into nine tools. Deleting is a tool of its own, marked destructive, so a client asks before it runs. Search results come back newest first.
Fastmail mailboxes stop asking to be reconnected
Fastmail mailboxes connected with an app password kept reporting that they needed reconnecting. Fastmail now runs over IMAP and SMTP, and existing mailboxes were moved across automatically. An app password is now the only way to connect Fastmail.
Mai 2026
Connect any mailbox over IMAP
Enter the IMAP and SMTP details of any server and it connects, with the settings filled in for iCloud, Yahoo, Zoho and Yandex. Mail goes out through your own provider, from your own address.
Five languages
The marketing site, the docs and the dashboard in English, Norwegian, Spanish, French and Chinese.
Workspaces, with teammates
Invite teammates by email, with a role that decides what they can change. Inboxes and API keys belong to the workspace rather than to one login.
MCP Emails is live
Connect a mailbox and work it from an AI assistant: list, read, search, send and reply. Gmail and Fastmail to start, with Claude connecting over OAuth and other clients using an API key.
Fehlt etwas oder funktioniert etwas nicht? Schreiben Sie an hello@mcpemails.com